This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/jOykBhJC42A0W5WnNWHQ6Ui_HAI.roa File: jOykBhJC42A0W5WnNWHQ6Ui_HAI.roa (raw, json) Hash identifier: p6WX3Hu0x5KT7vdzzBlcWjdetobjNczy8S7l0BXnNGc= Subject key identifier: 8C:EC:A4:06:12:42:E3:60:34:5B:95:A7:35:61:D0:E9:48:BF:1C:02 Certificate issuer: /CN=73df91fb3c68ceb8650ee19a63ce40b3c592a56b Certificate serial: 019B7F137A25152A30AE571D0198546FF251 Authority key identifier: 73:DF:91:FB:3C:68:CE:B8:65:0E:E1:9A:63:CE:40:B3:C5:92:A5:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9-R-zxozrhlDuGaY85As8WSpWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/jOykBhJC42A0W5WnNWHQ6Ui_HAI.roa Signing time: Fri 02 Jan 2026 14:19:01 +0000 ROA not before: Fri 02 Jan 2026 14:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50655 IP address blocks: 178.20.168.0/21 maxlen: 21 178.20.174.0/24 maxlen: 24 2a00:1d38::/32 maxlen: 32 2a00:1d38:fa::/48 maxlen: 48 2a00:1d38:feed::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft rsync://rpki.ripe.net/repository/DEFAULT/c9-R-zxozrhlDuGaY85As8WSpWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:7a:25:15:2a:30:ae:57:1d:01:98:54:6f:f2:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73df91fb3c68ceb8650ee19a63ce40b3c592a56b Validity Not Before: Jan 2 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ceca4061242e360345b95a73561d0e948bf1c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:43:eb:07:93:ae:30:66:d0:c7:0c:b4:85:1e: c0:cd:ce:27:0a:13:e1:3f:83:51:41:fd:84:c5:28: 5a:aa:0b:e9:15:a3:0e:61:c6:05:0e:8b:bd:3d:14: e5:20:5a:b8:44:f1:1d:9e:3a:68:9e:ac:62:9e:5e: bd:4d:d9:86:5f:c7:f3:3b:6d:5c:56:ab:5d:b5:22: 44:e2:29:35:f7:6a:fa:8c:c3:8c:e7:4e:8a:f6:8c: ba:2d:aa:f5:e8:0b:d8:c5:13:f3:63:6d:cd:49:2e: 9c:b9:74:3e:43:c0:40:70:84:2e:f8:95:16:9e:18: 33:42:31:8e:b0:93:31:9c:d6:7d:7c:29:86:d2:d2: 95:55:fa:8d:f0:e0:9b:f4:89:1f:3f:b5:f1:a4:16: ed:1a:38:58:25:83:7f:1c:9a:83:07:bc:c0:8a:a1: ad:d2:86:62:3b:fe:23:72:d9:fc:63:59:50:2c:19: d8:55:62:3f:40:2c:ba:25:ad:a0:3b:9b:2b:f2:19: 61:fd:54:ce:57:b7:b2:d4:90:aa:de:28:cd:25:e1: f3:2b:31:41:17:71:7c:4f:cd:d2:cd:38:92:5d:0e: dc:68:42:ad:b7:ec:91:2b:78:1a:45:f1:02:d4:04: 0f:15:ce:89:77:ef:5e:a9:1a:87:bc:10:e8:13:83: eb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EC:A4:06:12:42:E3:60:34:5B:95:A7:35:61:D0:E9:48:BF:1C:02 X509v3 Authority Key Identifier: keyid:73:DF:91:FB:3C:68:CE:B8:65:0E:E1:9A:63:CE:40:B3:C5:92:A5:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9-R-zxozrhlDuGaY85As8WSpWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/jOykBhJC42A0W5WnNWHQ6Ui_HAI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.20.168.0/21 IPv6: 2a00:1d38::/32 Signature Algorithm: sha256WithRSAEncryption 63:ff:53:7f:5e:10:92:d1:82:7e:65:96:bf:ea:55:0d:b9:c2: 33:f9:29:c8:63:58:ce:89:69:78:ca:da:d8:af:54:45:80:fa: dc:a5:5e:dc:f7:a1:bb:57:14:ae:2e:e0:12:16:a0:c3:a6:13: b5:71:ee:5c:f9:8e:cc:13:be:38:20:54:f1:4e:9c:ce:56:4c: a6:ef:96:96:25:3a:f6:4a:65:65:9b:85:8a:e5:0d:65:72:47: c4:ce:d4:6b:60:a0:76:4a:ed:0a:46:43:31:16:10:f5:c3:fd: 1c:e5:92:af:6b:fa:b3:b2:5b:52:2e:b2:c7:50:c9:70:00:11: 3c:56:4d:bb:ce:64:90:5e:58:e4:0d:c0:39:40:8d:3f:5f:73: 5f:70:f9:f4:20:88:8a:6c:47:a7:39:ba:cc:fe:64:ab:c0:90: ee:24:f3:ca:03:29:12:47:41:60:b6:cf:83:3a:09:5b:84:a1: e3:6b:60:b9:c3:35:53:8d:b5:b7:1d:0f:e2:da:ee:42:df:93: f4:ed:0a:fa:cd:8a:9b:b9:61:cc:90:46:5e:7c:68:5f:c8:74: 39:ca:06:48:64:98:c2:20:ba:d7:f6:2a:b5:7e:16:a4:7d:14: 2e:b8:d1:62:f3:c8:8d:b8:e8:b6:28:78:c2:e8:6a:43:a6:2c: e7:95:fc:a6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/E3olFSowrlcdAZhUb/JRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZGY5MWZiM2M2OGNlYjg2NTBlZTE5YTYzY2U0MGIzYzU5 MmE1NmIwHhcNMjYwMTAyMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2VjYTQwNjEyNDJlMzYwMzQ1Yjk1YTczNTYxZDBlOTQ4YmYxYzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkPrB5OuMGbQxwy0hR7Azc4nChPh P4NRQf2ExShaqgvpFaMOYcYFDou9PRTlIFq4RPEdnjponqxinl69TdmGX8fzO21c VqtdtSJE4ik192r6jMOM506K9oy6Lar16AvYxRPzY23NSS6cuXQ+Q8BAcIQu+JUW nhgzQjGOsJMxnNZ9fCmG0tKVVfqN8OCb9IkfP7XxpBbtGjhYJYN/HJqDB7zAiqGt 0oZiO/4jctn8Y1lQLBnYVWI/QCy6Ja2gO5sr8hlh/VTOV7ey1JCq3ijNJeHzKzFB F3F8T83SzTiSXQ7caEKtt+yRK3gaRfEC1AQPFc6Jd+9eqRqHvBDoE4PrFQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIzspAYSQuNgNFuVpzVh0OlIvxwCMB8GA1UdIwQY MBaAFHPfkfs8aM64ZQ7hmmPOQLPFkqVrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzktUi16eG96cmhsRHVHYVk4NUFzOFdTcFdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mMzBkMmItMmFiZC00ODcyLWIxN2Ut ZmJkZjk0YTExZTZmLzEvak95a0JoSkM0MkEwVzVXbk5XSFE2VWlfSEFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mMzBkMmItMmFiZC00ODcyLWIxN2UtZmJkZjk0YTExZTZm LzEvYzktUi16eG96cmhsRHVHYVk4NUFzOFdTcFdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDshSoMA0E AgACMAcDBQAqAB04MA0GCSqGSIb3DQEBCwUAA4IBAQBj/1N/XhCS0YJ+ZZa/6lUN ucIz+SnIY1jOiWl4ytrYr1RFgPrcpV7c96G7VxSuLuASFqDDphO1ce5c+Y7ME744 IFTxTpzOVkym75aWJTr2SmVlm4WK5Q1lckfEztRrYKB2Su0KRkMxFhD1w/0c5ZKv a/qzsltSLrLHUMlwABE8Vk27zmSQXljkDcA5QI0/X3NfcPn0IIiKbEenObrM/mSr wJDuJPPKAykSR0Fgts+DOglbhKHja2C5wzVTjbW3HQ/i2u5C35P07Qr6zYqbuWHM kEZefGhfyHQ5ygZIZJjCILrX9iq1fhakfRQuuNFi88iNuOi2KHjC6GpDpiznlfym -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:08 2026 by rpki-client